Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8CDEB6A73911EF9F663F95762E951A.roa
File: DE8CDEB6A73911EF9F663F95762E951A.roa (raw, json)
Hash identifier: MHSJm2hPVYms+oHjL6/3mKyCo52Afx0vY4PgeWUYgJo=
Subject key identifier: 19:CE:3B:73:EF:7B:3B:F2:02:53:E6:6C:96:A2:62:0C:19:5C:1A:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8CDEB6A73911EF9F663F95762E951A.roa
Signing time: Wed 20 Nov 2024 12:20:46 +0000
ROA not before: Wed 20 Nov 2024 12:20:42 +0000
ROA not after: Fri 29 Nov 2024 12:20:42 +0000
asID: 20473
IP address blocks: 154.218.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69525 (0x10f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 20 12:20:42 2024 GMT
Not After : Nov 29 12:20:42 2024 GMT
Subject: CN=673dd41e-04c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:3d:de:56:ad:42:fc:26:a4:52:dc:7c:d3:
5b:e0:ee:66:35:e6:c2:cf:4c:5d:4c:5e:38:c8:ed:
16:4c:f4:20:cb:ec:fd:59:ab:96:ab:4a:66:27:21:
66:23:42:d0:6a:97:81:af:02:89:dd:2b:b3:15:13:
2b:93:f1:20:e3:23:09:10:32:4d:85:60:57:bb:e5:
98:ed:aa:8e:75:d8:69:20:00:9f:46:d4:22:f9:ea:
02:25:39:87:50:4d:2a:08:db:d1:ea:19:d7:8c:f0:
68:bc:b2:a9:2d:37:5a:3c:e6:e6:95:2b:1c:43:ef:
96:c6:64:8f:c8:63:88:a1:1d:18:4a:36:4b:f2:30:
60:d4:e2:82:90:f9:79:6f:12:74:11:33:c9:57:dc:
dc:e3:cb:51:86:d7:a8:42:64:4c:5b:c6:a8:47:70:
7a:98:28:cb:b2:cf:d2:0c:c2:cb:0b:3b:1c:6b:e8:
73:ba:f5:e8:0c:d6:c7:12:82:60:a7:9b:79:9b:b8:
ec:7e:ef:18:57:8c:ed:9a:33:dd:7b:53:2b:6c:2c:
21:1e:d9:36:0f:d4:63:b5:e5:97:df:e5:1b:ec:96:
a2:fb:30:3f:fa:90:21:af:aa:33:a7:0b:ca:8e:fe:
51:a2:c1:62:78:e9:c4:a6:5a:d6:e6:66:6b:7f:c6:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:3B:73:EF:7B:3B:F2:02:53:E6:6C:96:A2:62:0C:19:5C:1A:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8CDEB6A73911EF9F663F95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:86:57:b8:29:a7:8c:83:6d:36:a6:36:d5:30:58:22:65:24:
59:6f:52:c6:82:ab:4a:7e:c7:18:92:24:2a:a1:6b:fc:50:fb:
d9:89:bf:51:3e:b9:35:3a:1f:b0:6f:8d:8a:9c:0b:0e:7a:91:
d8:2e:9f:f8:89:6e:d5:c7:92:35:66:e9:8f:28:77:6d:d1:16:
c9:1a:e1:7d:22:26:04:37:13:4c:7f:d9:7e:37:b8:96:12:0d:
13:d3:be:49:4e:a2:93:90:9d:a2:97:d4:de:e2:75:b4:95:e7:
6e:86:47:0e:f1:08:19:83:17:e4:ad:33:23:3a:01:3b:b9:b0:
fe:d7:ad:7e:4a:28:b4:4d:3b:c2:47:57:c1:ee:dc:95:f6:c7:
73:39:5d:0d:3f:16:21:99:53:82:0d:4b:a9:b6:4d:99:e0:8c:
30:f9:41:55:be:86:2f:da:5e:96:0f:ba:00:0e:17:47:86:9e:
d6:12:5d:3c:03:75:3f:dd:0f:d8:98:82:57:cb:6c:af:a9:58:
55:01:2b:a9:a5:68:20:15:0e:a9:4f:30:ff:ae:8e:f1:f3:c7:
b2:15:6f:09:7e:94:38:41:d2:5e:98:32:a9:e1:1e:b9:68:89:
19:f5:8f:ef:6b:e0:7f:09:82:48:fb:54:db:99:1f:a1:e1:86:
ef:64:dc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:08 2025 by rpki-client